Attackers are exploiting a major weakness that has allowed them access to the NPM code repository with more than 100 ...

Recently, security researchers Socket found 10 packages on npm targeting software developers, specifically those who use the ...

Having another security threat emanating from Node.js’ Node Package Manager (NPM) feels like a weekly event at this point, ...

An active campaign named 'PhantomRaven' is targeting developers with dozens of malicious npm packages that steal ...

Supply chain security company Safety has discovered a trojan in NPM that masqueraded as Anthropic’s popular Claude Code AI ...

North Korean threat group Famous Chollima is using blockchain technology to hide malware payloads in smart contracts, which marks the first documented case of a nation-state actor adopting ...

The North Korean threat actor behind the Contagious Interview campaign has started combining features from two of its malware ...

A vulnerability in Next.js Middleware has been fixed in v14.2.32 and v15.4.7. The issue occurred when request headers were directly passed into NextResponse.next(). In self-hosted applications, this ...

Microsoft on Monday attributed a threat actor it tracks as Storm-1175 to the exploitation of a critical security flaw in Fortra GoAnywhere software to facilitate the deployment of Medusa ransomware.